Close Your Ports. Batten down the hatches!

Close Your Ports. Batten down the hatches! Gentlemen callers from nations without extradition policies are calling.

3 days of having port 3389 open on a Linux box. Lesson. Close your ports, use strong passwords, and make sure your software is updated! This is the equivalent of random people coming up to your front door and just checking if your house is open 19 times over 3 days. I know this isn’t a shocker to most people, but it is good to have a reminder. 🙂

2012-12-31 18:10:43 [INFO] Disconnecting /188.80.128.27:63020: Protocol error
2012-12-31 18:10:43 [INFO] /188.80.128.27:63020 lost connection
Host : bl15-128-27.dsl.telepac.pt
Country : Portugal
2012-12-31 19:55:40 [INFO] Disconnecting /198.23.150.84:3748: Protocol error
2012-12-31 19:55:40 [INFO] /198.23.150.84:3748 lost connection
Host : host.colocrossing.com (216.246.49.26 )
Country : United States
2012-12-31 22:13:05 [INFO] Disconnecting /198.23.150.84:1502: Protocol error
2012-12-31 22:13:05 [INFO] /198.23.150.84:1502 lost connection
Host : host.colocrossing.com (216.246.49.26 )
Country : United States
2012-12-31 22:29:39 [INFO] Disconnecting /198.23.150.84:1688: Protocol error
2012-12-31 22:29:39 [INFO] /198.23.150.84:1688 lost connection
Host : host.colocrossing.com (216.246.49.26 )
Country : United States
2012-12-31 22:39:10 [INFO] Disconnecting /198.23.150.84:4286: Protocol error
2012-12-31 22:39:10 [INFO] /198.23.150.84:4286 lost connection
Host : host.colocrossing.com (216.246.49.26 )
Country : United States
2012-12-31 22:47:24 [INFO] Disconnecting /198.23.150.84:1783: Protocol error
2012-12-31 22:47:24 [INFO] /198.23.150.84:1783 lost connection
Host : host.colocrossing.com (216.246.49.26 )
Country : United States
2012-12-31 22:54:48 [INFO] Disconnecting /198.23.150.84:2464: Protocol error
2012-12-31 22:54:48 [INFO] /198.23.150.84:2464 lost connection
Host : host.colocrossing.com (216.246.49.26 )
Country : United States
2012-12-31 23:01:44 [INFO] Disconnecting /198.23.150.84:2912: Protocol error
2012-12-31 23:01:44 [INFO] /198.23.150.84:2912 lost connection
Host : host.colocrossing.com (216.246.49.26 )
Country : United States
2013-01-01 06:30:10 [INFO] Disconnecting /109.124.37.27:63366: Protocol error
2013-01-01 06:30:10 [INFO] /109.124.37.27:63366 lost connection
Host : user-109-124-37-27.tomtelnet.ru
Country : Russian Federation
2013-01-01 12:18:39 [INFO] Disconnecting /203.170.74.234:12274: Protocol error
2013-01-01 12:18:39 [INFO] /203.170.74.234:12274 lost connection
Host : gb-lan-74-234.kar.netsolir.com
Country : Pakistan
2013-01-01 12:28:49 [INFO] Disconnecting /79.5.93.71:3413: Protocol error
2013-01-01 12:28:49 [INFO] /79.5.93.71:3413 lost connection
Host : host71-93-static.5-79-b.business.telecomitalia.it
Country : Italy
2013-01-01 21:27:20 [INFO] Disconnecting /86.96.103.199:4700: Protocol error
2013-01-01 21:27:20 [INFO] /86.96.103.199:4700 lost connection
Host : bba455367.alshamil.net.ae
Country : United Arab Emirates
2013-01-01 21:41:46 [INFO] Disconnecting /110.222.34.54:63023: Protocol error
2013-01-01 21:41:46 [INFO] /110.222.34.54:63023 lost connection
Host : ?
Country : China
2013-01-01 21:47:09 [INFO] Disconnecting /98.189.133.222:55594: Protocol error
2013-01-01 21:47:09 [INFO] /98.189.133.222:55594 lost connection
Host : wsip-98-189-133-222.oc.oc.cox.net
Country : United States
2013-01-01 22:23:08 [INFO] Disconnecting /222.168.113.74:2149: Protocol error
2013-01-01 22:23:08 [INFO] /222.168.113.74:2149 lost connection
Host : 74.113.168.222.broad.jl.jl.dynamic.163data.com.cn
Country : China
2013-01-02 00:10:00 [INFO] Disconnecting /124.224.241.38:2146: Protocol error
2013-01-02 00:10:00 [INFO] /124.224.241.38:2146 lost connection
Host : ?
Country : China
2013-01-02 02:05:02 [INFO] Disconnecting /186.55.11.9:1869: Protocol error
2013-01-02 02:05:02 [INFO] /186.55.11.9:1869 lost connection
Host : r186-55-11-9.dialup.adsl.anteldata.net.uy
Country : Uruguay
2013-01-02 03:57:31 [INFO] Disconnecting /177.132.82.131:4955: Protocol error
2013-01-02 03:57:31 [INFO] /177.132.82.131:4955 lost connection
Host : 177.132.82.131.dynamic.adsl.gvt.net.br
Country : Brazil
2013-01-02 13:37:12 [INFO] Disconnecting /77.61.115.4:51931: Protocol error
2013-01-02 13:37:12 [INFO] /77.61.115.4:51931 lost connection
Host : mail.btts.nl
Country : Netherlands

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s